Controls
11 controls from PCI DSS v4.0 apply to this module.
| Control | Clause | Change |
|---|---|---|
| CloudWatch log groups should have retention period of at least 365 dayscloudwatch_log_group_retention_period_365 3.2.1 | 3.2.1 | |
| Log groups should have encryption at rest enabledlog_group_encryption_at_rest_enabled 3.5.1 | 3.5.1 | |
| Redshift clusters should have audit logging enabledredshift_cluster_audit_logging_enabled 5.3.4 | 5.3.4 | |
| Redshift clusters should have automatic snapshots enabledredshift_cluster_automatic_snapshots_min_7_days 10.3.3 | 10.3.3 | |
| Redshift clusters should have automatic upgrades to major versions enabledredshift_cluster_automatic_upgrade_major_versions_enabled 6.3.3 | 6.3.3 | |
| Redshift cluster encryption in transit should be enabledredshift_cluster_encryption_in_transit_enabled 1.2.5 | 1.2.5 | |
| Redshift clusters should have enhanced VPC routing enabledredshift_cluster_enhanced_vpc_routing_enabled 1.3.1 | 1.3.1 | |
| Redshift clusters should have KMS encryption enabledredshift_cluster_kms_enabled 3.5.1 | 3.5.1 | |
| Redshift clusters should have Multi-AZ deployments enabledredshift_cluster_multiple_az_enabled 3.5.1 | 3.5.1 | |
| Redshift clusters should prohibit public accessredshift_cluster_prohibit_public_access 1.2.8 | 1.2.8 | |
| VPC Security groups should only allow unrestricted incoming traffic for authorized portsvpc_security_group_allows_ingress_authorized_ports 1.3.2 | 1.3.2 |